SQL-IDS: a specification-based approach for SQL-injection detection. - Konstantinos Kemalis; Theodoros Tzouramanis (SAC, 2008)